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WHAT IS CLAIMED IS : 

1 . A method for setting passwords comprising: 

(A) associating a user ID with a phone number of a jaf£rsonal 
communication device; 

(B) generating a new password based at least upon a tokepf 

(C) setting a password associated with the user fD to be the new 
password; and 

(D) transmitting the token to the personal coja£nunication device using 
the phone number associated with the user ID. 

2. The method of Claim 1, further comprising 

(E) associating the user ip"Wi^h a pa^code. 

The method of Claim/2, wh^reM (B) is based additionally upon the 




composing j 
er token. 

(C), and (D) are performed in 



therein the personal communication device is a 



30 



passcode. 

4. The method of Clairh 1 , 
(F) receiving a request fo/ 

5. The method of (flair 
response to (F). 

6. The method of I 
mobile phone. 

7. The methcyf of Claim 1, wherein the personal communication device is a 

pager. 

8. A pa^word setting system comprising: 
a Mrst user database configured to associate a user ID with a phone 

numbeybf a personal communication device; 

a control module configured to create a password based at least upon a 
tok6n, the control module further configured to cause a second user database to 
associate the password with the user ID; and 

a communication module interface configured to cause a communication 
module to transmit the token to the personal communication device using the 
phone number associated with the user ID. 
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the login data is additionally based 



# # 

9. The password setting system of Claim 8, wherein the first user datat^se 
and the second user database are the same database. 

10. The password setting system of Claim 8, wherein the first use/database 
is further configured to associate the user ID with a passcode, and wherein the control 

5 module is further configured to create the password based additionally upon the 

passcode. 

11. A method of regulating access to a secure/system, the method 
comprising: 

(A) transmitting a user token to a personal communication device; 
10 (B) receiving login data in response to a request for authentication 

information, wherein the login data is based a/least upon the user token; and 

(C) granting access to the/secure ^ptem based upon the received login 

data. 

12. The method of Claim lA, wKereiH' 
15 upon a user ID. 

13. The method of Claim |1 /wherein the login data comprises a user ID. 

14. The method of Clain/l2, wherein the login data is additionally based 
upon a passcode. 

15. The method of (^aim lV^herein the login data comprises a user ID and 
20 a password. 

16. The methocj/of Claim 15, wherein the password comprises a passcode 
and the token. 

17. The method of Claim 16, wherein the password is a concatenation of the 
passcode and the to^en. 

25 18. Thj£ method of Claim 16, wherein the password is a hashed 

concatenation o£ the passcode and the token. 

19. / The method of Claim 11, further comprising 

(D) generating the user token. 
2G( The method of Claim 19, further comprising 

30 /(E) receiving a request for the user token. 
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21. The method of Claim 20, wherein (A) and (D) are performed in resgemse 

to (E). 

22. The method of Claim 11, wherein the personal commimicajkm device is 
a mobile phone. 

23. The method of Claim 11, wherein the personal cogacfnunication device is 
a pager. 

24. An access control system comprising: 
a user token server configurpd^to tj?Snsmit a token to a personal 

communication device, the user to)&n senj^r further configured to generate a 
1 0 valid password based at least upor 

an authentication modme configured to receive at least a submitted 
password in response to a request ^r^aiifhenticatKm of a user, the authentication 
module further configured to/ j#ant/access"T6 the user if at least the submitted 
password is based at least iWin th6 token and matches the valid password. 
15 25. The access contpl system of Claim 24, wherein the user token server is 

further configured to genej^te the valid password based additionally upon a valid 
passcode that is known tc/the user. 

26. The access control system of Claim 24, wherein the user token server is 
further configured p transmit the token in response to a request by the user. 
20 27. Xtfe access control system of Claim 25, wherein the user token server is 

further configured to associate the valid password with a valid user ED, wherein the 
authentication module is further configured to receive a submitted user ID in response 
to the inquest for authentication, and wherein the authentication module is further 
configured to grant access to the user if, in addition, the submitted user ID matches the 
25 valid user ID. 
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